Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c1d443d3-b94c-3bee-a97a-ad301ad5fecf.roa
File:                     c1d443d3-b94c-3bee-a97a-ad301ad5fecf.roa (raw, json)
Hash identifier:          gsobGm71MBHfiSP5MZdp/wuGpPU46qYOKoVvMM1i8wg=
Subject key identifier:   14:20:76:1C:AC:5F:18:CD:90:49:8C:23:3C:DC:BE:41:74:94:ED:56
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A08B3C994782F893399C44
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c1d443d3-b94c-3bee-a97a-ad301ad5fecf.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10796
IP address blocks:        24.123.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:8b:3c:99:47:82:f8:93:39:9c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=22b78329-e151-4f23-b6a8-0a79466bc8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cc:54:23:21:92:f3:9c:fb:25:16:c4:4b:f5:
                    0f:0a:dc:68:bf:55:5c:0d:f7:5b:83:60:a2:52:11:
                    c9:67:98:7a:24:62:52:81:86:8f:7d:07:7f:e9:44:
                    50:47:81:65:22:71:39:45:2b:82:d1:41:43:61:5c:
                    9b:7f:49:0e:44:6c:ae:ed:cb:0b:75:f4:7d:a1:6a:
                    f8:75:6a:ff:7f:16:f0:4a:ce:fd:4a:96:00:09:12:
                    74:46:4a:81:12:d8:22:31:1b:fc:f3:21:70:6b:f6:
                    b5:6d:08:93:eb:ce:07:95:ae:33:04:04:ac:67:8c:
                    2b:f9:aa:f7:06:0f:41:1d:0a:d6:2d:32:2d:30:cd:
                    e1:03:90:4d:69:2a:d8:a3:d8:21:44:1f:6c:f1:3f:
                    9d:52:ee:63:22:8f:17:da:0b:42:2a:a3:0a:e5:34:
                    70:11:14:42:75:40:bc:f2:17:b2:3a:6e:70:4a:19:
                    35:c9:aa:42:d2:f2:54:13:82:0a:f0:b5:f0:65:d7:
                    07:e1:2f:10:6d:c4:dc:9f:d0:30:41:e3:e8:a6:ca:
                    b7:dc:ea:77:aa:05:b0:33:58:9a:37:57:af:07:6d:
                    8c:59:35:71:40:85:6f:37:ff:c5:50:97:54:d1:cc:
                    4e:43:66:53:9b:b8:cf:9b:8c:b5:f2:79:b8:f5:a8:
                    1b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:20:76:1C:AC:5F:18:CD:90:49:8C:23:3C:DC:BE:41:74:94:ED:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c1d443d3-b94c-3bee-a97a-ad301ad5fecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:fd:d7:64:c4:c3:21:d9:81:3d:f0:ba:07:d1:0e:1b:8d:c6:
         79:1b:a5:c2:9f:98:9e:57:ad:9c:4f:0d:c3:94:52:e1:3a:8a:
         9f:50:61:28:ae:1c:20:eb:fd:21:9c:af:c6:71:36:6d:3a:0c:
         d8:e3:f2:f5:a8:2b:ef:2b:f3:32:31:ec:17:89:7a:b7:92:54:
         f5:d3:2f:24:d0:f7:92:fe:b0:57:9d:d5:e4:fb:45:c3:e7:f4:
         8a:c6:70:66:3d:7c:af:b5:ab:56:07:0e:31:b0:ec:31:8f:58:
         a9:90:6a:a9:64:6a:40:9d:ee:e3:45:85:58:0f:d3:db:ab:2b:
         f5:0f:99:2d:a3:b8:34:d5:86:d2:b8:f4:6b:4b:e8:77:3d:60:
         61:b2:dc:61:2c:c9:39:eb:70:89:aa:a9:99:6c:3c:95:ff:2b:
         4c:85:f9:72:d5:ac:84:72:b4:0b:f3:69:1d:83:e4:21:45:ba:
         4c:93:2b:3d:e4:ab:02:2b:ea:98:0f:0d:c5:fb:e8:06:e6:f5:
         19:61:18:b1:54:9e:0d:0d:5c:43:c1:54:85:5e:a5:1e:ea:5f:
         17:a9:dc:a4:e7:7b:69:4a:50:3f:18:43:3e:95:23:6a:33:e8:
         71:dd:95:08:5a:69:9f:ef:e4:f0:fa:bc:3c:a7:8f:17:fa:7d:
         c0:0c:4e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:36 2024 by rpki-client on console-fra.rpki-client.org